This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer (raw, json) Hash identifier: cUO8v/qx3k3juNvxkYZdtJYu3hxw4ZBhEBYAtJ+TfQE= Subject key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6A7549E8198CCE2DD41BB601812F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15457 IP: 83.223.160.0/19 IP: 84.23.192.0/19 IP: 89.109.64.0/18 IP: 95.172.160.0/19 IP: 159.255.48.0/20 IP: 185.80.76.0/22 IP: 188.125.192.0/19 IP: 213.138.224.0/19 IP: 213.190.192.0/19 IP: 2a00:d180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a7:54:9e:81:98:cc:e2:dd:41:bb:60:18:12:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5472b1473bc781b70440315c83d119c8abc86fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cb:aa:ff:7e:7e:f7:b8:37:51:60:81:d9:5b: 99:e8:9c:62:ec:6f:5e:64:a0:ef:87:17:38:02:aa: 3b:e7:1e:7f:ea:e9:6b:f2:05:e4:e6:88:6c:38:aa: ef:b4:9e:4c:a1:43:a2:e6:ce:16:58:53:d0:be:de: 29:04:de:43:00:cc:69:02:62:78:f0:09:e7:c3:bc: 05:cc:7a:48:8e:3d:23:16:37:84:65:63:23:f2:47: df:9e:a1:83:13:b3:4a:3e:57:18:68:4b:a0:a2:21: c6:23:02:de:d0:8d:f5:94:d5:8e:94:78:de:05:69: 2d:b6:c5:e4:fe:05:f4:4e:91:4b:62:e0:1c:65:96: 35:39:8c:c9:e1:1c:02:b7:46:37:90:fc:a5:d6:84: ce:bf:f2:a2:db:43:bf:98:81:3e:b2:8e:eb:60:39: 2a:26:5d:49:57:0b:5c:dc:df:55:2e:b6:a4:c3:4f: 99:19:1b:d6:ab:6d:47:46:f9:b3:f6:94:9d:2c:de: d8:f9:92:d1:8d:07:26:0e:11:4c:18:2f:5c:80:0c: cb:c4:5e:1a:0e:0d:c5:53:79:3d:a5:90:6f:68:38: 30:14:a6:e5:c5:be:12:8d:e6:e4:5a:25:4c:37:a8: 3d:ab:e3:67:7f:de:68:a8:9f:a9:58:00:b3:f8:30: a4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.223.160.0/19 84.23.192.0/19 89.109.64.0/18 95.172.160.0/19 159.255.48.0/20 185.80.76.0/22 188.125.192.0/19 213.138.224.0/19 213.190.192.0/19 IPv6: 2a00:d180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15457 Signature Algorithm: sha256WithRSAEncryption 93:39:f0:68:53:7b:48:f4:17:05:a3:95:e1:9d:c6:37:45:3c: 41:4f:3b:36:b6:1b:d7:c1:36:35:5d:55:81:64:94:39:51:ee: 6d:88:32:d8:4c:52:6c:09:21:43:73:d1:58:63:b6:80:ec:b9: 01:24:cb:83:de:ed:50:a5:79:b1:aa:8f:e3:a1:87:e7:b8:c0: 4c:7e:4f:e4:2f:6e:5f:2e:4a:c7:d5:9f:ff:f3:6e:19:ca:13: d2:bd:ba:01:9d:8e:b9:96:99:0e:b7:a4:41:ad:1a:a3:4a:a7: 2d:9c:c8:3d:38:2a:e4:67:54:d7:00:00:e9:e5:4d:5f:c2:6d: 82:92:14:c0:35:b4:3e:05:9c:93:9a:e8:95:b9:fe:c9:ff:1b: d3:72:cc:d2:8d:aa:14:f9:75:58:69:a3:37:a8:47:88:f0:44: 2b:a9:e8:d9:86:22:6a:9e:61:ec:60:b3:aa:3b:f8:a2:45:66: 66:cf:62:b9:c1:5c:b7:9b:82:da:d9:90:42:24:c7:d2:b8:4b: fb:69:6e:40:1f:60:b8:98:94:fa:70:b9:4b:df:8e:5e:69:29: b2:13:d6:df:b3:c5:42:0c:c0:c3:13:e1:22:26:32:a2:65:0f: 4f:91:55:33:b6:82:a0:3e:4f:8d:9e:20:e3:bd:6c:f7:db:37: ed:9b:4e:27 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt3xqdUnoGYzOLdQbtgGBLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQ3MmIxNDczYmM3ODFiNzA0NDAzMTVjODNkMTE5YzhhYmM4NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcuq/35+97g3UWCB2VuZ6Jxi7G9e ZKDvhxc4Aqo75x5/6ulr8gXk5ohsOKrvtJ5MoUOi5s4WWFPQvt4pBN5DAMxpAmJ4 8Annw7wFzHpIjj0jFjeEZWMj8kffnqGDE7NKPlcYaEugoiHGIwLe0I31lNWOlHje BWkttsXk/gX0TpFLYuAcZZY1OYzJ4RwCt0Y3kPyl1oTOv/Ki20O/mIE+so7rYDkq Jl1JVwtc3N9VLrakw0+ZGRvWq21HRvmz9pSdLN7Y+ZLRjQcmDhFMGC9cgAzLxF4a Dg3FU3k9pZBvaDgwFKblxb4SjebkWiVMN6g9q+Nnf95oqJ+pWACz+DCk8wIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFKVHKxRzvHgbcEQDFcg9EZyKvIb8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzMwMTEy Zi0wZTlkLTRmYzgtYjg1NC1iMTU2NWIyNTU4NTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMzAxMTJm LTBlOWQtNGZjOC1iODU0LWIxNTY1YjI1NTg1NC8xL3BVY3JGSE84ZUJ0d1JBTVZ5 RDBSbklxOGh2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQFU9+gAwQFVBfAAwQGWW1AAwQFX6ygAwQEn/8w AwQCuVBMAwQFvH3AAwQF1YrgAwQF1b7AMA0EAgACMAcDBQMqANGAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjxhMA0GCSqGSIb3DQEBCwUAA4IBAQCTOfBoU3tI9BcF o5XhncY3RTxBTzs2thvXwTY1XVWBZJQ5Ue5tiDLYTFJsCSFDc9FYY7aA7LkBJMuD 3u1QpXmxqo/joYfnuMBMfk/kL25fLkrH1Z//824ZyhPSvboBnY65lpkOt6RBrRqj SqctnMg9OCrkZ1TXAADp5U1fwm2CkhTANbQ+BZyTmuiVuf7J/xvTcszSjaoU+XVY aaM3qEeI8EQrqejZhiJqnmHsYLOqO/iiRWZmz2K5wVy3m4La2ZBCJMfSuEv7aW5A H2C4mJT6cLlL345eaSmyE9bfs8VCDMDDE+EiJjKiZQ9PkVUztoKgPk+NniDjvWz3 2zftm04n -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:20 2026 by rpki-client